Not a Feature of AWS Security Token Service

Answer: C.

Options A, B, D are incorrect.

Option A is a true statement.

Option B is a true statement.

STS “AssumeRole” action will enable users to assume a role.https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html.

Option C is a false statement, so correct option.

With Git credentials, you can generate a static user name and password in the Identity and Access Management (IAM) console that you can use to access AWS CodeCommit repositories from the command line, Git CLI, or any Git tool that supports HTTPS authentication.

https://aws.amazon.com/blogs/devops/introducing-git-credentials-a-simple-way-to-connect-to-aws-codecommit-repositories-using-a-static-user-name-and-password/

Option D is a true statement because by default, AWS Security Token Service (AWS STS) is available as a global service, and all AWS STS requests go to a single endpoint at

https://sts.amazonaws.com

Global requests map to the US East (N.

Virginia) Region.

AWS recommends using Regional AWS STS endpoints instead of the global endpoint to reduce latency, build in redundancy, and increase session token validity.

https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html

AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for users you authenticate (federated users). These credentials enable you to carry out authorized AWS operations for a limited period. This helps in securing your AWS resources by minimizing the scope of access and authorization.

Option A is correct. STS enables you to request temporary, limited-privilege credentials. This is a key feature of STS that allows you to provide temporary access to users or services that require access to AWS resources. These credentials can be used to access AWS resources for a specified period of time, after which they expire automatically.

Option B is correct. STS enables users to assume roles. This allows you to delegate access to AWS resources to IAM users, applications, or services that don't normally have access to those resources. When a user assumes a role, they are granted temporary security credentials that provide the permissions associated with the role.

Option C is incorrect. STS does not generate Git Credentials for IAM users. Git Credentials are used to authenticate with Git repositories, and are not related to AWS IAM or STS.

Option D is correct. By default, AWS STS is available as a global service. This means that you can use STS to generate temporary credentials for AWS resources in any region where the service is available.

In summary, Option C is not a feature of AWS Security Token Service.